// HACKER NEWS — CYBERSECURITY

Ruby 4.0 Universal RCE Deserialization Gadget Chain

Published: 08/14/2026, 06:09 AM

This post releases a new universal chain that turns a single Marshal.load into command execution on Ruby, built with new gadgets from untapped sources as well as old gadgets put to new use.